Logos Bio Electronics Co., Ltd. ("Company") establishes and discloses this Privacy Policy in accordance with the Korean Personal Information Protection Act to protect users' personal information and rights, and to handle user grievances related to personal information smoothly.
| Category | Items |
|---|---|
| Required | Email address, password (stored encrypted) |
| Paid subscriptions | Card number (stored masked), card issuer, payment history, billing key |
| Automatically collected | Service usage records, access IP, cookies, browser/OS information |
| Collection method | Direct entry by the user during signup/Service use, and provision via PG (payment gateway) integration such as Toss Payments |
In principle, the Company does not provide personal information to third parties. Exceptions are listed below.
| Recipient | Purpose | Items | Retention |
|---|---|---|---|
| Toss Payments Co., Ltd. | Payment processing, settlement, billing key management | Payment amount, order info, card authentication info | 5 years (Act on Consumer Protection in Electronic Commerce) |
| Processor | Entrusted Work |
|---|---|
| Supabase (Infrastructure) | Database and authentication hosting |
| Cloudflare | CDN, DNS, security |
| Anthropic, Google, OpenAI and other LLM providers | AI response generation |
Users may at any time request access, correction, deletion, or suspension of processing of their personal information, and may request deletion of personal information by deleting their account. Requests submitted via the contact below will be processed without delay.
When the retention period expires or the processing purpose is fulfilled, personal information is destroyed without delay. Electronic files are permanently deleted by irrecoverable means, and printouts are shredded or incinerated.
The Company transfers personal information outside the Republic of Korea as described below to provide the Service. Users have the right to refuse such transfers; however, refusal may limit the use of related Services.
| Recipient | Country, Items, Purpose, Period |
|---|---|
| Supabase Inc. (U.S. entity) |
Country: Japan (AWS ap-northeast-1, Tokyo) Items: Email, encrypted password, member ID, Service usage records, payment history (masked card number, card issuer, billing key, etc.) Purpose: Database hosting and authentication service Timing and method: Transmitted in real time over the network when the Service is used Retention: Until account deletion (payment records: 5 years under the Act on Consumer Protection in Electronic Commerce) |
| Cloudflare, Inc. (U.S. entity) |
Country: United States and global CDN edge locations Items: Access IP, cookies, browser/OS information Purpose: CDN, DNS, and security (DDoS protection) services Timing and method: Transmitted in real time over the network upon Service access Retention: Up to 3 months for log records |
| Anthropic, PBC (U.S. entity) |
Country: United States Items: Prompts and attachments entered by users into AI agents Purpose: AI response generation Timing and method: Transmitted in real time over the network at the time of an AI request Retention: Up to 30 days per Anthropic policy (not used for training) |
| OpenAI, L.L.C. (U.S. entity) |
Country: United States Items: Prompts and attachments entered by users into AI agents Purpose: AI response generation Timing and method: Transmitted in real time over the network at the time of an AI request Retention: Up to 30 days per OpenAI API policy (not used for training) |
| Google LLC (U.S. entity) |
Country: United States Items: Prompts and attachments entered by users into AI agents Purpose: AI response generation via Gemini and other AI models Timing and method: Transmitted in real time over the network at the time of an AI request Retention: Up to 60 days from the date of collection per Google API policy (not used for training) |
※ The above cross-border transfers are notified pursuant to Article 28-8 of the Korean Personal Information Protection Act. By agreeing to this Policy, users are deemed to have consented to such transfers.